takeover 22
- 👩💻IW Weekly #132: Account Takeover on Palo Alto Networks, SQLi Cheat Sheet, Pre-Auth SQL Injection in WhatsUp Gold, SSRF Automation, Bypassing Sanitizers using MXSS, and many more…
- 👩💻IW Weekly #115: Abusing Auto-Mail Responders, $25,000 Github Takeover, AI in Bug Hunting, RCE on Tenda AC8 Router, GraphQL Hacking and many more…
- 👩💻IW Weekly #113: Subdomain Takeovers to Credential Leaks, Stored XSS to RCE, VSCode SFTP File Exposure, $203K Bounties for Bugs in Azure Health Bot and many more…
- 👩💻IW Weekly #108: PostMessage for XSS, Smart Contract Security, Admin Panel Takeover, DOM-XSS to ATO, Process Injection With C, Privilege Escalation and many more …
- 👩💻IW Weekly #99: Top 10 hacking techniques of 2023, CSP Bypass, Multiple XSS on Joomla, XSS on ChatGPT, Meteor subdomain takeover, Length filter bypass to SQL Injection, Nomulus pentest and many more…
- 👩💻IW Weekly #97: XSS on Microsoft Whiteboard and Excalidraw, ChatGPT Account Takeover, reverse engineered ESP32-based air purifier, advanced HTTP header exploitation techniques, PikaBot Malware Analysis and many more…
- 👩💻IW Weekly #94: 2FA Bypass, Decoding Obfuscated JavaScript, Exploiting Password Reset Functionality, AWS S3 Bucket Takeover, Invisible Prompt Injections and many more…
- 👩💻IW Weekly #90: Django Debug Mode, Attacking The Rsync Service, DOM XSS to Stored XSS, CVE-2022-2216, Hacking AWS & Kubernetes, Twitter’s XSS + CSRF Leads to Account Takeover and many more…
- 👩💻IW Weekly #78: OAuth Misconfiguration, Account Takeover, Virtual Hosts, SQL Injection, Hacker Tweets, Advanced Root Detection Bypass Techniques and many more..
- 👩💻IW Weekly #68: Account Takeover using Custom OTP, CVE-2023-36934, Investigating EC2 , XSS in hidden inputs , macOS user's real name brute-forced with mDNS and many more..
- Account takeover of Facebook/Oculus accounts due to First-Party access_token stealing
- Account takeover of Facebook/Oculus accounts due to First-Party access_token stealing
- Account Takeover in Canvas Apps served in Comet due to failure in Cross-Window-Message Origin validation
- Multiple bugs chained to takeover Facebook Accounts which uses Gmail.
- More secure Facebook Canvas Part 2: More Account Takeovers
- Multiple bugs allowed malicious Android Applications to takeover Facebook/Workplace accounts
- Multiple bugs allowed malicious Android Applications to takeover Facebook/Workplace accounts
- More secure Facebook Canvas : Tale of $126k worth of bugs that lead to Facebook Account Takeovers
- Oculus SSO “Account Linking” bug leads to account takeover on third party websites and inside VR Games/Apps
- Oculus SSO “Account Linking” bug leads to account takeover on third party websites and inside VR Games/Apps
- Subdomain takeover: ignore this vulnerability at your peril
- Permanent account takeover on Yahoo's Small Business platform